Debendra Nath Poddar

About Debendra Nath Poddar

20+ years architecting enterprise security infrastructure that transforms threats into strategic advantages. Specializing in AI Security Engineering—securing GenAI pipelines, assessing LLM vulnerabilities, and building autonomous threat response systems that reduce breach incidents by 45% while generating $10M+ in revenue.WHAT I DO: AI SECURITY ENGINEERINGSecuring generative AI pipelines from threat modeling through production. Deep expertise in- OWASP Top 10 LLM vulnerabilities (prompt injection, training data poisoning, model DoS, supply chain risks, etc.)- LLM Red Team methodologies (jailbreaking attacks, direct/indirect prompt injection, RAG poisoning, model extraction)- Prompt Engineering for Security (few-shot learning, chain-of-thought reasoning, adversarial robustness)- GenAI governance frameworks (NIST AI RMF, EU AI Act compliance, responsible AI guardrails)- Hands-on red team tools: Garak, TrustTest, TrustGate, adversarial ML frameworks AUTONOMOUS THREAT RESPONSEBuilding agentic AI systems that detect, investigate, and remediate threats autonomously- Multi-agent threat orchestration (LangChain, Semantic Kernel)- Threat intelligence RAG pipelines (Pinecone-backed retrieval of 100K+ incidents)- Autonomous reasoning engines that prioritize and respond to threats 24/7- Reduced MTTR from 10 days to 5 hours; eliminated 70% Tier-1 alert fatigue ZERO TRUST + AI-POWERED DEFENSEEnterprise-scale Zero Trust with ML-driven adaptive controls- Zscaler ZTNA + Illumio microsegmentation (45% breach attempt reduction)- Microsoft Entra ID with Conditional Access risk assessment- Identity-first architecture reducing attack surface by 35%- AI-enhanced behavioral analytics detecting anomalies before exploitationTECHNICAL FOUNDATION- Cloud Security: CSPM/CNAPP across AWS/Azure/GCP - DevSecOps Automation: GitLab Security, Snyk, Kubernetes Pod Security, artifact signing- Threat Detection: Sentinel KQL, Splunk SPL, CrowdStrike Falcon EDR- Supply Chain Security: SBOM governance, SCA implementation, PCI DSS 4.0 compliance- SOAR Orchestration: Multi-tool incident automation (60% Tier-1 automation)BUSINESS IMPACT:$10M+ revenue from AI-SOC, Zero Trust, and cloud security services $1.9M average breach cost reduction per enterprise client 45% breach incident reduction through AI-driven architecture 20+ enterprise security transformations completed 12-member Center of Excellence built and scaled globallyWHAT I\'M LOOKING FOR:Lead/Principal-level roles where AI security is a strategic imperative.

Experience

1. General Manager

   HCLTech

   Apr 2024 — Present · IN

   Leading enterprise cybersecurity transformation with focus on AI-driven security operations, autonomous threat response, and Zero Trust architecture at Fortune 500 scale.AI SECURITY ENGINEERING & AUTONOMOUS DEFENSE- Architected AI-enabled SOC reducing breach incidents by 45% while generating $800–900K annual operational savings per enterprise client- Designed autonomous threat detection system using LangChain multi-agent orchestration with few-shot learning and chain-of-thought reasoning for threat analysis- Conducted comprehensive LLM red team assessments: jailbreaking tests, prompt injection attacks (direct/indirect), RAG poisoning scenarios, model extraction simulations (NIST AI RMF, EU AI Act compliance)- Achieved 60% MTTD improvement, 95% MTTR reduction, 70% Tier-1 alert fatigue elimination through Splunk UBA + Sentinel Copilot automationZERO TRUST & IDENTITY-FIRST ARCHITECTURE- Led enterprise-wide Zero Trust adoption for BFSI customer: Zscaler ZPA + Illumio microsegmentation- Achieved 45% breach attempt reduction, 35% identity attack surface reduction- Implemented Entra ID Conditional Access with ML-driven risk assessment (behavioral analytics, device posture, location anomalies)CLOUD SECURITY & DEVOPS AUTOMATION- Deployed CSPM/CNAPP across AWS, Azure, GCP: Prisma Cloud + Defender for Cloud with ML-driven misconfiguration detection- Achieved 50% misconfiguration incident reduction- Implemented comprehensive DevSecOps: GitLab Security (SAST/DAST/SCA), Snyk dependency scanning, Kubernetes Pod Security Admission, container signing (Sigstore/Cosign)- Achieved 65% open-source vulnerability reduction through automated remediationSUPPLY CHAIN SECURITY & SBOM GOVERNANCE- Established SBOM-driven supply chain security program: SBOM generation (Syft), SCA with Snyk, artifact signing, binary authorization in Kubernetes- Enabled PCI DSS 4.0 compliance for manufacturing client through comprehensive SBOM governance